$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4Au0bOHNvYsK2lFyh1wM_NhbPVY.roa File: 4Au0bOHNvYsK2lFyh1wM_NhbPVY.roa (raw, json) Hash identifier: XnMd+o6nrZ5uKMH+8Xj4lCBg7e5oLMljN98FhV31eMw= Subject key identifier: E0:0B:B4:6C:E1:CD:BD:8B:0A:DA:51:72:87:5C:0C:FC:D8:5B:3D:56 Certificate issuer: /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Certificate serial: 0FE9 Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4Au0bOHNvYsK2lFyh1wM_NhbPVY.roa Signing time: Fri 22 Aug 2025 08:55:44 +0000 ROA not before: Fri 22 Aug 2025 08:55:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17716 IP address blocks: 140.124.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 20:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4073 (0xfe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A Validity Not Before: Aug 22 08:55:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E00BB46CE1CDBD8B0ADA5172875C0CFCD85B3D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:fc:a7:b6:a3:ca:48:0d:27:2b:78:bf:fb: bb:89:22:bf:95:d9:18:ce:d5:cd:09:c3:53:db:da: cb:52:90:cf:31:0a:5a:4e:8d:96:bf:bf:42:1a:20: 4a:b2:9c:81:22:56:30:1f:c8:91:7f:93:fb:25:9e: a3:5e:d8:9f:c3:92:7e:e8:bd:d8:b5:66:40:ab:02: 93:41:7a:25:a3:9b:28:a4:8f:0d:bc:68:7f:61:9a: 6c:de:11:e2:cb:bb:79:86:a6:ee:3a:9e:67:7e:cb: 6f:eb:81:9e:5c:2f:5a:91:70:80:aa:3a:d0:4c:76: 76:21:61:41:d4:89:42:00:a2:88:74:2e:51:26:76: 5e:95:3a:73:2c:2c:0f:50:d0:2f:3c:41:f6:4e:7a: a9:b1:1e:37:ee:73:e3:3e:aa:af:a5:61:4d:0c:a8: e5:d6:d0:cd:f2:3a:80:dc:04:75:56:cb:b3:a3:e7: f7:ff:4c:83:7f:cd:d1:80:81:12:cb:d9:82:ee:ff: 81:19:8b:da:80:85:80:bf:df:ba:2d:0a:d9:b7:68: 21:31:05:bf:24:cb:3b:67:53:e4:8a:0b:92:9f:0e: 3d:5d:88:06:d1:14:4a:b7:e8:0c:2e:df:cf:fb:cb: c1:7c:46:2f:f0:4e:f5:88:96:34:06:3f:1e:e6:8c: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:B4:6C:E1:CD:BD:8B:0A:DA:51:72:87:5C:0C:FC:D8:5B:3D:56 X509v3 Authority Key Identifier: keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4Au0bOHNvYsK2lFyh1wM_NhbPVY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 140.124.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:d6:7f:5d:c9:1c:04:96:b5:1b:96:54:35:43:33:af:3b:8c: 5b:64:3f:0f:5c:dc:87:3a:75:5d:89:83:f5:26:08:04:66:2d: 78:d0:af:d1:02:e0:96:18:ed:df:60:1b:34:c2:7b:e5:d8:02: 4c:b3:4e:0e:f7:2c:10:a8:a7:29:44:6a:1d:3f:95:b0:c0:48: d3:24:11:76:c6:6e:6c:51:89:01:f8:b4:e9:49:f5:ef:2f:b6: 5a:81:23:ee:f5:8d:03:50:17:2b:01:3f:17:6f:33:3a:30:12: 31:47:8c:ab:df:a5:45:66:c2:ef:ba:32:47:b1:56:71:16:4d: 14:0e:54:58:c2:25:96:14:1a:8a:60:ba:8d:54:99:d3:d0:0b: 8f:0c:2a:84:fd:b7:d1:83:59:71:14:7d:52:c8:61:85:47:83: fb:7b:19:1f:ed:96:c0:46:7b:cb:f0:eb:15:5f:ea:a2:27:37: eb:c6:3e:72:91:5f:99:00:cc:dd:e0:8a:c5:64:56:1e:56:95: 5a:68:dd:fd:67:c8:d5:2d:39:3c:1f:f5:c7:19:45:07:5a:13: 2b:9b:7c:64:c6:3a:b7:2b:88:ac:46:19:2b:9e:fb:f8:bf:e4: 55:26:af:ed:e5:43:14:52:70:f3:f5:7e:dd:60:2a:93:f5:e0: c8:ab:e6:b2 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICD+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3 QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTA4MjIw ODU1NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUwMEJCNDZDRTFDREJE OEIwQURBNTE3Mjg3NUMwQ0ZDRDg1QjNENTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/KvyntqPKSA0nK3i/+7uJIr+V2RjO1c0Jw1Pb2stSkM8xClpO jZa/v0IaIEqynIEiVjAfyJF/k/slnqNe2J/Dkn7ovdi1ZkCrApNBeiWjmyikjw28 aH9hmmzeEeLLu3mGpu46nmd+y2/rgZ5cL1qRcICqOtBMdnYhYUHUiUIAooh0LlEm dl6VOnMsLA9Q0C88QfZOeqmxHjfuc+M+qq+lYU0MqOXW0M3yOoDcBHVWy7Oj5/f/ TIN/zdGAgRLL2YLu/4EZi9qAhYC/37otCtm3aCExBb8kyztnU+SKC5KfDj1diAbR FEq36Awu38/7y8F8Ri/wTvWIljQGPx7mjEDpAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQU4Au0bOHNvYsK2lFyh1wM/NhbPVYwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+ tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC80QXUwYk9ITnZZc0sybEZ5aDF3 TV9OaGJQVlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjHww DQYJKoZIhvcNAQELBQADggEBACfWf13JHASWtRuWVDVDM687jFtkPw9c3Ic6dV2J g/UmCARmLXjQr9EC4JYY7d9gGzTCe+XYAkyzTg73LBCopylEah0/lbDASNMkEXbG bmxRiQH4tOlJ9e8vtlqBI+71jQNQFysBPxdvMzowEjFHjKvfpUVmwu+6MkexVnEW TRQOVFjCJZYUGopguo1UmdPQC48MKoT9t9GDWXEUfVLIYYVHg/t7GR/tlsBGe8vw 6xVf6qInN+vGPnKRX5kAzN3gisVkVh5WlVpo3f1nyNUtOTwf9ccZRQdaEyubfGTG OrcriKxGGSue+/i/5FUmr+3lQxRScPP1ft1gKpP14Mir5rI= -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:42 2025 by rpki-client